Malicious code in run-after (npm)

The package run-after was found to contain malicious code...